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(54) Title: SECURE BIOS 

(57) Abstract 

A subsystem prevents unauthorized 
modificaticMis of BIOS program code em- 
bedded in modifiable non-volatile memory 
devices such as flash memory. A cryp- 
tographic coprocessor (34) containing the 
BIOS mcmoiy device (42) performs au- 
thentication and validation on the BIOS 
upgrade based on a public/private key pro- 
tocol. The authcnticatiCHi is performed b> 
verif ying thedig| Utl signatu re embedded in 
the BIOS upgrade. 
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SECURE BIOS 



RArKCROUN n OF THE INVRNTTON 

1 . Field of the Invention 

This invention relates to the field of security of computer firmware, especially in the 
areas of Basic Input and Output System ("BIOS") in general computing systems, such 
as personal computers ("PCs"). 

2. Description of Related Art 

One of the most critical elements in a computer system is the boot-up firmware, such 
as the Basic Input and Output System ("BIOS"). Typically stored in some form of 
non-volatile memory, the BIOS is machine code, usually part of an Operating System 
("OS"), which allows the Central Processing Unit ("CPU") to perform tasks such as 
initialization, diagnostics, loading the operating system kernel from mass storage, and 
routine input/output ("I/O") functions. 

Upon power up, the CPU will "boot up" by fetching the instruction code residing in 
the BIOS. Due to its inherent nature, the BIOS has two conflicting requirements: (1) 
it should be well protected because if it is modified or destroyed, the entire system will 
fail, (2) it should be easily modifiable to allow field upgrade for feature enhancement 
or removal of software bugs. 

Traditionally, BIOS is implemented in Erasable Programmable Read Only Memory 
("EPROM"). EPROM has an advantage of not being modified in circuit. To modify 
the contents of the EPROM, the device must be first erased by being removed from 
the socket and exposed to Ultraviolet light for a prolonged period of time. In this 
respect, BIOS implemented in EPROM is resistant to virus attack and other electronic 
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sabotages. However, EPROM devices do not support "field upgrades" because these 
devices are not in-circuit programmable, which is a necessary characteristic for field 
upgrades. Field upgrading allows customers to upgrade the BIOS in the field to avoid 
costly delay and pans exchanges. Because of the importance for field upgrading, 
virtually all BIOS firmware is now implemented using flash memories. However, 
being field modifiable, BIOS flash memories are vulnerable to virus attacks which 
could cause devastating results in sensitive applications such as financial transactions. 

With no security protection, conventional computer architectures implemented with 
BIOS flash memories are vulnerable to many kinds of intrusive attacks, such as a 
virus attack. In a typical virus attack, the virus code executes a code sequence to 
modify the BIOS flash memory. The code in BIOS flash memory, having no 
protection, is corrupted and the desuuctive effects may become effective immediately, 
when the system is booted up the next time, or when certain conditions or events have 
occurred. The infected code may further propagate to other areas of the BIOS code or 
the operating system kernel. Because the BIOS is the first program code to execute 
when the computer system is "powered up", prior to any system or network virus 
scanning software, detection and eradication of a BIOS-based virus is extremely 
difficult. The BIOS-based virus can "hide its tracks" from such scanning software, 
effectively becoming invisible. 

The primary focus of the present invention, therefore, is to prevent corrupting the 
BIOS by a computer virus. This is achieved by imposing an authentication and 
validation procedure before the contents of the BIOS flash memory are modified. 

The approach which is pursued in this invention builds on the concept of BIOS 
authentication by incorporating the BIOS flash memories into existing hardware with 
authenticating capability such as the cryptographic coprocessor. Since the 
cryptographic coprocessor both stores the BIOS and enforces authentication of BIOS 
updates, an attacker has no means by which to corrupt the BIOS contents. 



wo 98/15082 



PCTAJS97/13520 



"3- 



SIJMMARY OF THE TNVFNTfON 

The present invention describes a system to securely update an executable code. The 
system comprises of a first storage element for storing a code update, a second storage 
element for storing the executable code that needs to be updated, an identification code 
for identifying the first storage element and the code update, and a security processor. 
The security processor is coupled to the second storage element to authenticate and 
validate the first storage element and the code update using the device identification. 
BRIEF DESCRIPTION OF THF HRAWTNCS 

The features and advantages of the present invention will become apparent from the 
following detailed description of the present invention in which: 

Figure 1 is a diagram of the present invention where the BIOS flash memory resides 
inside a cryptographic coprocessor which may be interfaced to the PCI bus. 

Figure 2 is a flowchart of the operations that occur in the present invention during a 
normal read access to the BIOS program by the host processor. 

Figure 3 is a flowchart of the operations that occur in the present invention during a 
field upgrade of the BIOS program. 

DESCRIPTION OF THE PREFERREn EMBODIMENT 

The present invention provides a procedure to authenticate and validate a code update, 
such as a BIOS upgrade for example, using cryptographic technology. In the 
following description, some terminology is used to discuss certain cryptographic 
features. A "key" is an encoding and/or decoding parameter used by conventional 
cryptographic algorithms such as Rivest, Shamir and Adleman ("RSA"), Data 
Encryption Algorithm ("DEA") as specified in Data Encryption Standard ("DES") and 
the like. A "certificate" is defined as any digital information (typically a public key) 
associated with an entity, encrypted by a private key held by another entity such as a 
manufacturer or a widely published trusted authority (e.g., bank, governmental entity, 
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trade association, etc.). A "digital signature" is similar to a certificate but is typically 
used for authenticating data. Herein, the term "secure" indicates that it is 
computationally infeasible for an interloper to successfully perpetuate fraud on a 
system. A security processor is an electronic device capable of performing security 
functions to provide security protection for the system. 

The authentication and validation are perfonmed by a security processor which 
contains the BIOS firaiware. One example of such a security processor is a 
cryptographic coprocessor. The cryptographic processor authenticates and validates 
the BIOS fimiware by using secret information such as a digital signature embedded 
in the BIOS upgrade. 

Referring to Figure 1, an embodiment of a computer system implemented within the 
present invention is shown. The computer system 10 includes a chipset 31 which 
operates as an interface to support communications between host processor 30, 
system memory 32, and devices coupled to a system bus 33. System memory 32 may 
include, but is not limited to conventional memory such as various types of random 
access memory ("RAM"), e.g., DRAM, VRAM, SRAM, etc., as well as memory- 
mapped I/O devices. System bus 33 may be implemented in compliance with any type 
of bus architecture including Peripheral Component Interconnect ("PCI"), a Universal 
Serial Bus ("USB") and the like. 

One of the devices that may be coupled to the system bus 33 includes a cryptographic 
coprocessor 34. Oyptographic coprocessor 34 comprises a bus interface 40, a 
processing unit 41 and a local non-volatile memory 42. The bus interface 40 is used 
to establish an electrical connection to system bus 33. Processing unit 41 is used as 
the main controller for the cryptographic coprocessor 34. Processing unit 41 
interfaces to its own local non- volatile memory 42. The boot-up program 43 is stored 
within non-volatile memory 42. It is contemplated that non-essential elements have 
not been illustrated to avoid obscuring the present invention. Examples of the non- 
essential elements that may be employed within the cryptographic coprocessor 34 
include RAM, a random number generator, and various cryptographic algorithm 
accelerators. Furthermore, although host processor 30 is shown separate from 
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cryptographic coprocessor 34 in Figure 1, cryptographic coprocessor 34 may be part 
of host processor 30 in which case host processor 30 accesses the BIOS program 
directly without going through system bus 33. 

In Figure 2, the steps associated with the **boot up" phase of the system are shown. 
First, in step 50, the host processor issues a read request for an address 
corresponding to the BIOS program. The cryptographic coprocessor responds to that 
request with the associated BIOS instruction (Step 60). Lastly/ the host processcM* 
processes that data in step 70. To continue processing BIOS instructions, this 
sequence is repeated. 

In a typical field BIOS upgrade, the software manufacturer (the BIOS vendor) will 
send the user a diskette containing the new BIOS code, and the code to perfomi the 
upgrade operadons. It is also possible for the BIOS vendor to establish a bulletin 
board system, or a data superhighway connection such as the Intemet, to allow users 
to download the^ lOS upgrade electronically and remotely. BIOS upgrading 
essentially involves erasing and writing to the BIOS flash memory. 

In Figure 3, the steps associated with a modification of the BIOS program are 
shown. In step 1 10, the host processor issues a "replace BIOS" command to the 
cryptographic coprocessor. This command would typically be generated by some 
type of BIOS management utility software, running either on the host processor itself 
or on a remote system. The purpose of this command is to prepare the cryptographic 
coprocessor for a new BIOS program (step 120). In step 130, the cryptographic 
coprocessor either passively receives the new BIOS program code from the host 
processor or actively retrieves it from a specified source (e.g. system memory). In 
step 140, the new BIOS program is stored internally or in a protected manner to 
assure that future authentication operations are perfomied on the specified *'new BIOS 
program". In step 150, the cryptographic coprocessor performs the appropriate 
authentication operations on this internally stored version of the new BIOS program. 
There are many ways such authendcation can be performed, including the use of 
secret information known only to the BIOS provider and the deployed cryptographic 
coprocessor. It is contemplated that public/private key cryptography may be used as 



wo 98/150S2 



PCTAJS97/13520 



-6- 

part of the authentication procedure, specifically using the well-known techniques of 
digital signatures and cenificates to validate the integrity and validity of the "new 
BIOS program". Whatever authentication technique is used, the salient feature is that 
it is performed within the cryptographic coprocessor on the local version of the new 
BIOS program. Once the authentication operations have been performed, in step 160, 
the cryptographic coprocessor can make a determination as to the validity of the new 
BIOS program. For example, the digital signature supplied with the "new BIOS 
program" may be valid, but the revision date may be inappropriate (e.g. older than the 
currently installed BIOS). If the new BIOS is determined to be invalid, it is deleted by 
the cryptographic coprocessor and is never used (step 170). If the new BIOS is valid, 
the new BIOS program is made operational and the previous BIOS program is deleted 
(step 180). Note that at this point, it would be normal to reboot the computer system 
to assure system-wide consistency. 

To support this digital signature- based method of BIOS authentication, the digital 
signature embedded in the distribution BIOS software upgrade should be underwritten 
or endorsed by an industry association, or a similar organization or procedure. The 
participants in this industry association are the BIOS vendors who want to be able to 
field upgrade their BIOS code. One of the functions of this indusffy association is to 
issue digital certificates to its BIOS vendor members, essentially assigning a digital 
certificate to each vendor to be used in BIOS upgrade software. This association 
provides its public key to be used by tiie cryptographic coprocessor during the BIOS 
authentication procedure. The cryptographic coprocessor will be preloaded with the 
public key of the industry association for BIOS vendors so that it will be able to verify 
any digital signature embedded in the BIOS upgrade code. Alternatively, the 
cryptographic coprocessor may be preloaded with another public key that may be used 
to authenticate a certificate chain to obtain this industry association public key. The 
BIOS upgrade code could be encrypted if necessary (to protect the code from being 
reverse engineered for example). Since the digital signature or the certificate issued by 
the industry association normally represents the authenticity of a reputable or credible 
BIOS vendor, an intmder cannot corrupt the BIOS code (unless of course he or she 
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somehow obtains secret private keys used to create such signatures or certificates) 
either directly or indirectly by virus attack. 

In another embodiment (not shown), the cryptographic coprocessor is part of the host 
processor. The host processor contains both the cryptographic coprocessor and the 
BIOS program. The host processor, acting itself as the security processor, performs 
the authentication and validation on the BIOS upgrade in the similar fashion as 
described above. The host processor will be preloaded with the public key of the 
industry association for BIOS vendors so that it will be able to verify any digital 
signature embedded in the BIOS upgrade code. 

Yet, in another embodiment (not shown), the BIOS program is located in a printed- 
circuit board ("PCB") or card plugged into a system expansion slot. The 
cryptographic coprocessor may be located on the same PCB or card or on another 
PCB or card or even inside the host processor. Regardless whether it is located in the 
system, as long as the cryptographic coprocessor is able to access the BIOS program, 
it can carry out the authentication and validation operations as described above. 

While this invention has been described with reference to illustrative embodiments, 
this description is not intended to be construed in a limiting sense. Various 
modifications of the illustrative embodiments, as well as other embodiments of the 
invention, which are apparent to persons skilled in the art to which the invention 
pertains are deemed to lie within the spirit and scope of the invention. 
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What is claimed is: 

1 . A system for securely updating an executable code, comprising: 
first storage means for storing a code update; 

second storage means fcH* storing said executable code; and 

first processing means for authenticating and validating said first storage means and 
said code update based on a device identification, said first processing means being 
coupled to said second storage means. 

2. The system of claim 1 wherein the executable code is a Basic Input and Output 
System. 

3. The system of claim 1 wherein the first storage means is one of a mass storage 
device and a file capable of being sent electronically in a computer network. 

4. The system of claim 1 wherein the second storage means is a modifiable non- 
volatile memory device. 

5. The system of claim 1 wherein the first processing means includes a 
cryptographic-processor. 

6. The system of claim 1 wherein the device identification received by the first 
processing means includes a digital signature. 

7. The system of claim 1 wherein said executable code is encrypted to produce an 
encrypted code, 

8. The system of claim 1 further comprising: 
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second processing means for communicating with said first processing means in order 
to execute said executable code. 

9. The system of claim 7 wherein said encrypted code is decrypted to produce a 
decrypted code. 

10. A system for securely updating an executable code, comprising: 
a first storage element that contains a code update; 

a second storage element that contains said executable code; and 
a security processor coupled to said second storage element, said security processor 
authenticating and validating said first storage element and said code update based on a 
device identification. 



1 1 . The system of claim 10 wherein the executable code is a Basic Input and 
Output System. 

12. The system of claim 10 wherein the first storage element is one of a mass 
storage device and a file capable of being sent electronically in a computer network. 

13. The system of claim 10 wherein the second storage element is a modifiable 
non-volatile menrary device. 

14. The system of claim 10 wherein the security processor is a cryptographic 
processor. 

15. The system of claim 10 wherein said device identification received by said 
security processor includes a digital signature. 
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16. The system of claim 10 wherein said executable code is encrypted to produce 
an encrypted code. 

17, The system of claim 10 further comprising: 

a host prxKessor for communicating with said security processor in order to execute 
said executable code. 

18\^ The system of claim 16 wherein said encrypted code is decrypted to produce a 
decrypted code. 

19. A method for securely updating an executable code, the method comprising the 
steps of: 

providing a first storage element for storing a code update; 
providing a second storage element for storing said executable code; 
configuring said first storage element to contain a device identification; 
providing a security processor for accessing said second storage element; 
authenticating said first storage element based on said device identification by said 
security processor, and 

updating said executable code by said code update if said first storage element is 
authenticated. 

20. The method of claim 19, wherein before said updating step, the method further 
comprises a step of validating said code update in the first storage element, 

21 . The method of claim 19 wherein the executable code is a Basic Input and 
Output System. 

22. The method of claim 19, wherein said executable code provided in the second 
storage element is in an encrypted format. 
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23. The method of claim 19 funher comprising: 

providing a host processor for communicating with said security processor in order to 
execute said executable code. 
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